CVE-2017-5358

Опубликовано: 15 мар. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the server argument to the (1) i5_connect, (2) i5_pconnect, or (3) i5_private_connect API function.

Ссылки

http://hyp3rlinx.altervista.org/advisories/EASYCOM-PHP-API-BUFFER-OVERFLOW.txt
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/141299/EasyCom-AS400-PHP-API-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/60
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96419
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41425/
Exploit
Third Party Advisory
VDB Entry
http://hyp3rlinx.altervista.org/advisories/EASYCOM-PHP-API-BUFFER-OVERFLOW.txt
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/141299/EasyCom-AS400-PHP-API-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/60
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96419
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41425/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:easycom-aura:easycom_for_php:4.0.0.29:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.35316

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-fg67-3jp9-xqx8